Common Weakness Enumeration

    CWE Definition / CWE-244

    CWE-244: Improper Clearing of Heap Memory Before Release ('Heap Inspection')

    Using realloc() to resize buffers that store sensitive information can leave the sensitive information exposed to attack, because it is not removed from memory.

    Published:19 Jul 2006
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-226: Sensitive Information in Resource Not Removed Before Reuse

    CWE-669: Incorrect Resource Transfer Between Spheres